
$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
File: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json)
Hash identifier: 5Uzc3OXwtJcUlrdLZJzNT7culeC6GoV8Z7fP2/lHMGg=
Subject key identifier: F9:8C:94:8C:B0:A6:32:2C:2F:B5:08:B0:71:CF:D3:4F:DA:12:74:DD
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Certificate issuer: /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial: 0B74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
Manifest number: 0B4F
Signing time: Tue 24 Mar 2026 19:03:35 +0000
Manifest this update: Tue 24 Mar 2026 19:03:34 +0000
Manifest next update: Tue 31 Mar 2026 19:03:34 +0000
Files and hashes: 1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: oeDM4az9og4TxPOmRqj4vK8zdEvfXHi0jEfUwtrN0LI=)
2: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: mmuNJzdQc+EMG4vi6YI8GL1XWoSarik/6NrUTgT3yPQ=)
3: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: BPfB/XTTgtvHGk3VIxBnFhEcnL04DxqHE/nHRVwjG7s=)
4: 76D38708D64611EE98C44371C4F9AE02.roa (hash: yMUFH8jfhcAN9l90UhmXr90e/hIZIMZpvn+Gq7qj/bY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2932 (0xb74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Validity
Not Before: Mar 24 19:03:34 2026 GMT
Not After : Mar 31 19:03:34 2026 GMT
Subject: CN=69c2e007-9f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:c9:4a:a4:c4:a3:14:eb:3c:18:cf:e5:bf:
fe:6b:7a:ef:2f:2b:0c:ec:ef:83:cb:29:28:22:39:
f2:f9:85:ed:26:0d:16:75:e0:a2:e1:c1:a1:81:ab:
3c:dd:e3:e3:a1:55:6a:08:96:00:9a:c0:ad:52:a1:
96:26:db:ef:bb:ff:85:d5:4b:df:49:1f:eb:a7:4e:
7c:64:f7:05:c6:0a:32:bc:c0:ec:01:cc:80:46:45:
16:f0:e5:4e:4d:6e:56:ed:35:ec:40:3b:55:45:3b:
3b:7e:b0:cf:a8:63:fc:eb:51:59:d7:7a:47:52:b5:
b0:a2:ec:30:da:91:b7:6c:f3:c5:bc:e8:98:99:e3:
e8:3c:e0:40:c2:01:33:13:96:b0:ac:1a:33:b9:92:
6e:f8:5d:b0:9b:b2:77:7a:9b:d5:a5:10:83:52:6f:
49:16:0c:4f:ea:74:a1:e1:4d:7f:0d:38:c9:71:42:
51:63:3f:63:74:6b:91:a8:32:eb:96:ce:67:ef:0e:
1c:59:dc:76:c3:13:01:35:42:81:76:7f:2c:44:ba:
84:6f:fb:5d:00:fe:02:a3:c7:9c:e7:8d:4f:08:7f:
ae:8c:bb:b2:32:90:06:1c:9c:4a:d8:97:3c:da:ca:
25:0d:91:1c:19:99:2c:19:75:bc:ca:96:83:26:63:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8C:94:8C:B0:A6:32:2C:2F:B5:08:B0:71:CF:D3:4F:DA:12:74:DD
X509v3 Authority Key Identifier:
keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:00:ee:85:85:cd:b1:ee:2b:f4:aa:b3:43:39:1f:f0:6e:e1:
9a:10:af:f1:43:20:f5:ed:85:cd:00:6e:c4:70:0f:15:00:0f:
95:c8:ba:b7:0a:e2:23:c0:37:e3:36:f4:08:ab:09:4f:a0:a2:
2c:04:4a:aa:5b:7f:97:cd:cc:1a:e0:b8:5c:e4:e0:94:66:50:
c7:15:a0:c5:e2:a8:74:a0:57:49:b8:a7:46:49:db:d0:2f:6b:
3d:b1:71:73:bc:9c:8e:3a:38:ea:a1:65:6e:a4:b3:aa:e0:5f:
b1:55:81:e7:10:91:64:5e:f0:a2:5c:93:52:7c:10:d4:c7:07:
c8:b4:4a:d6:74:78:4b:6b:3d:73:cb:9f:3e:b4:17:f5:be:2f:
2b:a6:52:90:e2:6e:25:44:4e:97:73:bc:04:27:5a:15:13:a5:
43:89:2a:fa:80:9c:50:65:78:4d:19:55:ba:c4:e9:a1:24:bf:
6d:0d:f1:0d:3a:ae:22:9d:1c:b4:5f:60:56:be:39:99:9c:00:
d3:11:6a:16:55:4b:28:6f:c2:1c:5b:b5:a9:63:b1:3f:e7:49:
78:ba:23:7a:8e:0d:c9:aa:1d:60:b0:b2:c5:3d:e8:67:a5:fe:
2b:00:d8:b5:3c:66:e3:f6:e9:5f:7b:48:10:b0:52:d4:e9:92:
0a:12:36:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:53 2026 by rpki-client